CVE-2020-13528

Published: Dec 18, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.

Affected (4)

Products: Lantronix: Xport Edge Firmware

Lantronix

1 product

Xport Edge Firmware

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix Xport Edge Firmware	Version 3.0.0.0 r11
Lantronix Xport Edge Firmware	Version 3.1.0.0 r9
Lantronix Xport Edge Firmware	Version 3.4.0.0 r12
Lantronix Xport Edge Firmware	Version 4.2.0.0 r7

Running on/with	Platform Versions
Lantronix Xport Edge	All versions

Related CWEs

CWE-319

Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (2)

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136

Source: talos-cna@cisco.com

Third Party Advisory

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1136

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.